Behavioral task
behavioral1
Sample
bae0fedbe6153daccdff670d6462fce61d2a3384870f636ef315fbc778d7b1cb.exe
Resource
win7-20231129-en
General
-
Target
bae0fedbe6153daccdff670d6462fce61d2a3384870f636ef315fbc778d7b1cb
-
Size
755KB
-
MD5
cfcb650379043e672d0b4201f491ddfa
-
SHA1
f8a1db5fdaaa9cd2db1c57790842311d36f70bbe
-
SHA256
bae0fedbe6153daccdff670d6462fce61d2a3384870f636ef315fbc778d7b1cb
-
SHA512
9a8281ad4648045ea47d35940380a8e856bcc2b5481cc3cd3ecbcb939f5b35e7da9d5b491b4b98798e5efac485b5a67775518b5f4e6c9d5b54b9524b630e69fc
-
SSDEEP
12288:kBz1gCQC4C7MnkUa2+vLn9rT/3SOBBQVLDEN15/ULt6Q1OPVV/e24w8oSf:kRTQnkuuDFTfSOB2/yb/UZ6QQPr/eZw6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bae0fedbe6153daccdff670d6462fce61d2a3384870f636ef315fbc778d7b1cb
Files
-
bae0fedbe6153daccdff670d6462fce61d2a3384870f636ef315fbc778d7b1cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 731KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE